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DETAILED ACTION 

1 . This communication is responsive to the communication filed on 
08/27/2009. Claims 1-10 are pending and claims 1-7 and 10 were amended. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1 -1 0 have been considered 
but are moot in view of the new ground(s) of rejection. 



Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

4. Claims 1-10 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Andersson et al. ( US Patent 6,931,016) in view of Gibrech (6,173,399). 

With regard to claim 1,3,5, 10, Andersson et al. disclose having an apparatus for routing 
packets from a first network node to a second network node in a data network, comprising: means 
for provisioning and then sending an ID to the first node. Andersson et al. disclose having a 
virtual private network management system, ( see title). Andersson et al. further disclose 
VPN manager server 14 which establish , maintains and terminates VPNs for any set of 
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network devices, ( see col.3 lines 5-15). Andersson et al. disclose having a message 
generator 24 for generating messages identifying members of various VPNs whereby the 
information is retrieve from the database, (see col.3 lines 50-67 and fig.3) ; wherein 
provisioning the unique first node ID also comprises determining a virtual private network (VPN) 
that is associated with the first node. ( see fig.3, a node ID associated with VPN), selecting the 
unique first node ID from a set of unique ID's that are associated with the VPN of the first node. 
Andersson et al. disclose the manager server 14 managing a database 22a which contains 
a list network devices, ( see col.3 lines 62-67 and col. 4 lines 1-5) wherein the provisioning, 
sending and mapping are accomplished by one or more entities other than the first node. 
(Andersson et al. disclose having a manager server 14 establish , maintains and terminates 
VPNs for any set of network devices, ( see col.3 lines 5-15); means for receiving a packet from 
the first node, said packet including the ID associated with said first node. Andersson et al. 
teach the manager server 14 receive a request from a router 18 and the request includes 
the IP address of the router, (see col. 4 lines 7-17); and means for using said unique second 
node ID, and the mapping to determine whether said first node is associated with at least one 
VPN, ( Andersson et al. disclose processing a request to determine VPN identifier, IP 
address and the security data form a router 18 , (seecol.4 lines 18-32). 
However, Andersson et al. do not disclose mapping a unique second ID with the VPN of the first 
node, and including routing information for routing said packet to a destination address 
associated with said second node,( Gilbrech discloses having a process and apparatus for 
the operation of virtual private networks on a common data packet communication^ see 
title). Gilbrech further discloses having a VPN unit 520 process a packet with a source 
address and a destination address and determining if VPN group, (see col. 8 lines 30-44). 
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Gilbrech disclose the VPN unit forward a packet to a destination address, ( see col.7 lines 
63-67). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to implement a VPN unit scheme which taught by Gilbrech into Andersson et 
al. VPN network disclose efficiently facilitating data transfer whereby increasing reliable 
throughput. 

With regard to claim 2, 4,6 and 11, Andersson et al. further teach the first unique ID 
differs from the second unique ID. Andersson et al disclose network devices ID have IP 
address , ( see fig.3 and col. 4 lines 18-20). 

With regard to claim 7, Andersson et al. further teach means for receiving at said Head 
End device a packet from said first node. Andersson et al. teach the manager server 14 
receive a request from a router 18 and the request includes the IP address of the router, 
(see col. 4 lines 7-17); means for examining said packet to identify the ID of said first node; and 
means for using said ID at said Head End device to determine whether said first node is a 
member of at least one VPN. ( Andersson et al. disclose having a manager server 14 
interpreted as a "Head end device" processing a request to determine VPN identifier, IP 
address and the security data form a router 18 , (seecol.4 lines 18-32). 

However, Andersson et a. do not disclose having a packet including a destination address 
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corresponding to a second node in the network. Gilbrech further discloses having a VPN unit 
520 process a packet with a source address and a destination address and determining if 
VPN group, (see col.8 lines 30-44). Gilbrech disclose the VPN unit forward a packet to a 
destination address, ( see col. 7 lines 63-67). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to implement a VPN unit scheme which taught by Gilbrech into Andersson et 
al. VPN network disclose efficiently facilitating data transfer whereby increasing reliable 
throughput. 

With regard to claim 8, Andersson et al. further teach means for if it is 
determined that said first node is a member of a first VPN. ( Andersson et al. 
disclose having a manager server 14 interpreted as a "Head end device" 
processing a request to determine VPN identifier, IP address and the 
security data form a router 18 , (seecol.4 lines 18-32). 

However, Andersson et a. do not disclose determining at said Head End device whether the 
destination address of said packet is within said first VPN. Gilbrech further discloses having a 
VPN unit 520 process a packet with a source address and a destination address and 
determining if VPN group, (see col.8 lines 30-44). Gilbrech disclose the VPN unit 
interpreted as a "head end device" forward a packet to a destination address, ( see col.7 
lines 63-67). 
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Therefore it would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to implement a VPN unit scheme which taught by Gilbrech into Andersson et 
al. VPN network disclose efficiently facilitating data transfer whereby increasing reliable 
throughput. 

With regard to claim 9, Andersson et al. further teach means for routing 
the packet to the second node. Andersson et al. disclose having a manager 
server 14 has the capability of sending data to various router 18, ( see col. 
3 lines 45-61). 

5. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office action. Accordingly, THIS ACTION IS MADE FINAL. 
See MPEP § 706.07(a). Applicant is reminded of the extension of time policy as 
set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is 
filed within TWO MONTHS of the mailing date of this final action and the advisory 
action is not mailed until after the end of the THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will 
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the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Conclusion 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to DEWANDA SAMUEL whose telephone 
number is (571)270-1213. The examiner can normally be reached on Monday- 
Thursday 8:30-5:30 EST. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Ricky Q. Ngo can be reached on (571) 272-3139. The 
fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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/DeWanda Samuel/ 
Examiner, Art Unit 2464 
12/9/2009 



/Ricky Ngo/ 

Supervisory Patent Examiner, Art 
Unit 2464 



